fixing permission

This commit is contained in:
Warunee Tamkoo 2025-01-08 12:42:15 +07:00
parent 014dc34abe
commit d490a7cea1

View file

@ -1,176 +1,229 @@
import { Controller, Route, Security, Tags, Body, Request, SuccessResponse, Response, Get, Put, Post, Path, Delete, Query } from "tsoa"
import { setLogDataDiff } from "../interfaces/utils"
import {
Controller,
Route,
Security,
Tags,
Body,
Request,
SuccessResponse,
Response,
Get,
Put,
Post,
Path,
Delete,
Query,
} from "tsoa";
import { setLogDataDiff } from "../interfaces/utils";
import { AppDataSource } from "../database/data-source"
import HttpSuccess from "../interfaces/http-success"
import HttpStatusCode from "../interfaces/http-status"
import HttpError from "../interfaces/http-error"
import permission from "../interfaces/permission"
import { RequestWithUser } from "../middlewares/user"
import { Appoint, CreateAppoint, Person, UpdateAppoint } from "../entities/Appoint"
import { AppointDirector } from "../entities/AppointDirector"
import { AppDataSource } from "../database/data-source";
import HttpSuccess from "../interfaces/http-success";
import HttpStatusCode from "../interfaces/http-status";
import HttpError from "../interfaces/http-error";
import permission from "../interfaces/permission";
import { RequestWithUser } from "../middlewares/user";
import {
Appoint,
CreateAppoint,
Person,
UpdateAppoint,
} from "../entities/Appoint";
import { AppointDirector } from "../entities/AppointDirector";
@Route("api/v1/probation/appoint")
@Tags("Appoint Director")
@Security("bearerAuth")
@Response(HttpStatusCode.INTERNAL_SERVER_ERROR, "เกิดข้อผิดพลาด ไม่สามารถแสดงรายการได้ กรุณาลองใหม่ในภายหลัง")
@Response(
HttpStatusCode.INTERNAL_SERVER_ERROR,
"เกิดข้อผิดพลาด ไม่สามารถแสดงรายการได้ กรุณาลองใหม่ในภายหลัง",
)
export class AppointController extends Controller {
private appointRepository = AppDataSource.getRepository(Appoint)
private appointDirectorRepository = AppDataSource.getRepository(AppointDirector)
private appointRepository = AppDataSource.getRepository(Appoint);
private appointDirectorRepository =
AppDataSource.getRepository(AppointDirector);
/**
* API
*
* @summary
*
*/
@Get("")
async GetList(@Query() keyword: string = "", @Query("page") page: number = 1, @Query("pageSize") pageSize: number = 10, @Request() request: RequestWithUser) {
await new permission().PermissionList(request, "SYS_PROBATION")
const _data = await new permission().PermissionOrgList(request, "SYS_PROBATION")
/**
* API
*
* @summary
*
*/
@Get("")
async GetList(
@Query() keyword: string = "",
@Query("page") page: number = 1,
@Query("pageSize") pageSize: number = 10,
@Request() request: RequestWithUser,
) {
// await new permission().PermissionList(request, "SYS_PROBATION")
// const _data = await new permission().PermissionOrgList(request, "SYS_PROBATION")
const conditions: any = {}
// const conditions: any = {}
if (_data.root != undefined && _data.root != null && _data.root[0] != null) {
conditions.root = _data.root
}
// if (_data.root != undefined && _data.root != null && _data.root[0] != null) {
// conditions.root = _data.root
// }
if (_data.child1 != undefined && _data.child1 != null && _data.child1[0] != null) {
conditions.child1 = _data.child1
}
// if (_data.child1 != undefined && _data.child1 != null && _data.child1[0] != null) {
// conditions.child1 = _data.child1
// }
if (_data.child2 != undefined && _data.child2 != null && _data.child2[0] != null) {
conditions.child2 = _data.child2
}
// if (_data.child2 != undefined && _data.child2 != null && _data.child2[0] != null) {
// conditions.child2 = _data.child2
// }
if (_data.child3 != undefined && _data.child3 != null && _data.child3[0] != null) {
conditions.child3 = _data.child3
}
// if (_data.child3 != undefined && _data.child3 != null && _data.child3[0] != null) {
// conditions.child3 = _data.child3
// }
if (_data.child4 != undefined && _data.child4 != null && _data.child4[0] != null) {
conditions.child4 = _data.child4
}
// if (_data.child4 != undefined && _data.child4 != null && _data.child4[0] != null) {
// conditions.child4 = _data.child4
// }
const appoint = await this.appointRepository.find({
relations: ["personal", "directors"],
where: { personal: conditions },
})
const appoint = await this.appointRepository.find({
relations: ["personal", "directors"],
where: { createdUserId: request.user.sub },
// where: { personal: conditions },
});
return new HttpSuccess(appoint)
}
return new HttpSuccess(appoint);
}
/**
* API
*
* @summary
*
*/
@Get("list/{id}")
async GetListCommand(@Request() request: RequestWithUser, @Path() id: string) {
const appoint = await this.appointRepository.find({
relations: ["directors"],
where: { profileId: id, status: "DONE" },
})
/**
* API
*
* @summary
*
*/
@Get("list/{id}")
async GetListCommand(
@Request() request: RequestWithUser,
@Path() id: string,
) {
const appoint = await this.appointRepository.find({
relations: ["directors"],
where: { profileId: id, status: "DONE" },
});
return new HttpSuccess(appoint)
}
return new HttpSuccess(appoint);
}
/**
* API
*
* @summary
*
*/
@Post("")
async Create(@Request() request: RequestWithUser, @Body() requestBody: CreateAppoint) {
await new permission().PermissionCreate(request, "SYS_PROBATION")
/**
* API
*
* @summary
*
*/
@Post("")
async Create(
@Request() request: RequestWithUser,
@Body() requestBody: CreateAppoint,
) {
await new permission().PermissionCreate(request, "SYS_PROBATION");
const data: any = {
topic: requestBody.topic,
profileId: requestBody.profileId,
createdUserId: request.user.sub,
createdFullName: request.user.name,
}
const before = null
const appoint = await this.appointRepository.save(data, { data: request })
setLogDataDiff(request, { before, after: appoint })
const data: any = {
topic: requestBody.topic,
profileId: requestBody.profileId,
createdUserId: request.user.sub,
createdFullName: request.user.name,
};
const before = null;
const appoint = await this.appointRepository.save(data, { data: request });
setLogDataDiff(request, { before, after: appoint });
return new HttpSuccess(appoint.id)
}
return new HttpSuccess(appoint.id);
}
/**
* API
*
* @summary API id
*
*/
@Get("{id}")
async GetById(@Request() request: RequestWithUser, @Path() id: string) {
let _workflow = await new permission().Workflow(request, id, "SYS_PROBATION")
if (_workflow == false) await new permission().PermissionGet(request, "SYS_PROBATION")
/**
* API
*
* @summary API id
*
*/
@Get("{id}")
async GetById(@Request() request: RequestWithUser, @Path() id: string) {
let _workflow = await new permission().Workflow(
request,
id,
"SYS_PROBATION",
);
if (_workflow == false)
await new permission().PermissionGet(request, "SYS_PROBATION");
const appoint = await this.appointRepository.findOne({
select: ["id", "topic", "status", "profileId"],
where: { id },
relations: ["directors"],
})
const appoint = await this.appointRepository.findOne({
select: ["id", "topic", "status", "profileId"],
where: { id },
relations: ["directors"],
});
return new HttpSuccess(appoint)
}
return new HttpSuccess(appoint);
}
/**
* API
*
* @summary
*
*/
@Put("{id}")
async Update(@Request() request: RequestWithUser, @Body() requestBody: UpdateAppoint, @Path() id: string) {
await new permission().PermissionUpdate(request, "SYS_PROBATION")
/**
* API
*
* @summary
*
*/
@Put("{id}")
async Update(
@Request() request: RequestWithUser,
@Body() requestBody: UpdateAppoint,
@Path() id: string,
) {
await new permission().PermissionUpdate(request, "SYS_PROBATION");
const appoint: any = await this.appointRepository.findOne({ where: { id } })
const appoint: any = await this.appointRepository.findOne({
where: { id },
});
if (!appoint) {
throw new HttpError(HttpStatusCode.NOT_FOUND, "ไม่พบข้อมูลการแต่งตั้งคณะกรรมการฯ")
}
if (!appoint) {
throw new HttpError(
HttpStatusCode.NOT_FOUND,
"ไม่พบข้อมูลการแต่งตั้งคณะกรรมการฯ",
);
}
const before = appoint
const before = appoint;
appoint.topic = requestBody.topic
appoint.updateUserId = request.user.sub
appoint.updateFullName = request.user.name
await this.appointDirectorRepository.delete({ appointId: id })
const directors: any = await requestBody.persons.map((x: Person) => ({
...x,
appointId: id,
createdUserId: request.user.sub,
createdFullName: request.user.name,
updateUserId: request.user.sub,
updateFullName: request.user.name,
}))
await this.appointDirectorRepository.save(directors)
appoint.topic = requestBody.topic;
appoint.updateUserId = request.user.sub;
appoint.updateFullName = request.user.name;
await this.appointDirectorRepository.delete({ appointId: id });
const directors: any = await requestBody.persons.map((x: Person) => ({
...x,
appointId: id,
createdUserId: request.user.sub,
createdFullName: request.user.name,
updateUserId: request.user.sub,
updateFullName: request.user.name,
}));
await this.appointDirectorRepository.save(directors);
await this.appointRepository.save(appoint, { data: request })
setLogDataDiff(request, { before, after: appoint })
await this.appointRepository.save(appoint, { data: request });
setLogDataDiff(request, { before, after: appoint });
return new HttpSuccess()
}
return new HttpSuccess();
}
/**
* API
*
* @summary
*
*/
@Delete("{id}")
public async deleteRole(@Path() id: string, @Request() request: RequestWithUser) {
await new permission().PermissionDelete(request, "SYS_PROBATION")
/**
* API
*
* @summary
*
*/
@Delete("{id}")
public async deleteRole(
@Path() id: string,
@Request() request: RequestWithUser,
) {
await new permission().PermissionDelete(request, "SYS_PROBATION");
await this.appointDirectorRepository.delete({ appointId: id })
await this.appointDirectorRepository.delete({ appointId: id });
const result = await this.appointRepository.delete({ id })
if (!result) throw new HttpError(HttpStatusCode.NOT_FOUND, "ไม่พบข้อมูล")
const result = await this.appointRepository.delete({ id });
if (!result) throw new HttpError(HttpStatusCode.NOT_FOUND, "ไม่พบข้อมูล");
return new HttpSuccess()
}
return new HttpSuccess();
}
}